Hello,

On Wed, 28 Dec 2016 19:04:20 +0000
Taylor R Campbell <campbell+netbsd-tech-...@mumble.net> wrote:

>    Date: Wed, 28 Dec 2016 10:06:00 -0500
>    From: Michael <macal...@netbsd.org>
> 
>    On Wed, 28 Dec 2016 07:26:26 +0000
>    co...@sdf.org wrote:
> 
>    > On Wed, Dec 28, 2016 at 02:49:54AM +0000, David Holland wrote:
>    > NetBSD is just about the only OS still using xorg as setuid root.
>    > Pretty much everyone else did away with it.  
> 
>    We only really need it for /dev/pci*, because that lets you mmap()
>    arbitrary PCI space - things like wsfb or sbus graphics work without it.
> 
> Likewise DRM/KMS.  We should disable options INSECURE by default on
> x86 and make Xorg not be suid root.  Obscure systems that still need
> it -- e.g., VIA, perhaps, which has no KMS driver -- can use custom
> kernel configs.

That would kill almost all X on non-x86 PCI.

have fun
Michael

Reply via email to